Live data from Hacker News

Android phones are sending significant amount of user data with no opt-out [pdf]

scss.tcd.ie

271–280 of 377 posts

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#271
post #95

Earlier quoted context omitted.

Do banking applications work? I mean as in "I buy X online. It requires me to login to my bank application and press 'confirm'. I perform this sequence, and online purchase is completed. "?

> I mean as in "I buy X online. It requires me to login to my bank application and press 'confirm'. I perform this sequence, and online purchase is completed. " Huh? This is not a real thing.

It is real and absolutely routine.

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#272
post #180

Earlier quoted context omitted.

It depends per bank; mine discontinued the paper OTP pad as well as the SMS codes, and gave me a separate 2FA device when I didn't want to use their app. I don't think banks can force you to have a smartphone yet.

Does nobody in the EU do computers ? How do they pass asinine laws like this ? I mean, from the outside, it always appears as though the EU is much better than the US when it comes to consumer rights, but it always feels like they don't have a very good grip on technology.

I don't think this was driven by law, but by an appropriate wish to increase transaction security (you really shouldn't use SMS for this anymore).

There are some rules here that are nonsense, such as know-your-customer laws that force me to enter my home address even when the product or service (say, a concert or train ticket) is delivered to me entirely electronically.

Most of the move to purely electronic payment is driven by the market and the large banks; e.g. in the Netherlands we actually never had laws that force shops to accept cash as payment.

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#273
post #180
post #152

Earlier quoted context omitted.

Most banks in EU require phone app based confirmations for transfers and other operations (according to PDS2 directive). Visa and Mastercard also introduced 3DSecrue system which piggybacks on the same system of confirmations. Vendors are incentivised to adopt it by lower rates. In essence when paying with card or making a wire transfer (or using some instant transfer method, for example Blik in Poland), you get noti…

It depends per bank; mine discontinued the paper OTP pad as well as the SMS codes, and gave me a separate 2FA device when I didn't want to use their app. I don't think banks can force you to have a smartphone yet.

> I don't think banks can force you

They can and do. There are a number of banks where you have absolutely no choice.

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#274

Earlier quoted context omitted.

Thank you. Much appreciated. :) (Perhaps WhatsApp might work as well, since, IME, it can be sideloaded and will work without a functional Google Play Services.)

Signal is specifically designed to work without Google Play Services, so expect a 1:1 experience when using it with these privacy conscious distros. I'm confident Whatsapp will work, but I have not tried. Push notifications will not work without Google Play Services.

> expect a 1:1 experience

Push notifications are bad and it drains significantly more battery.

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#275
post #101
post #80

Earlier quoted context omitted.

I hope you have recurring donations setup for all these FOSS apps. FOSS still means that developers need to eat.

It's unbelievable that I'm getting downvoted for asking people to pay for software on a platform where a large % of users are involved with technology. No wonder opensource based businesses are dissatisfied with how they are treated.

At a guess, it may have something to do with how rude the original comment was and how you doubled down on that rudeness with this one. If you toned it down a little and actually spoke to other people as human beings it might help you with this problem.

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#276

I use GraphineOS and LineageOS without Google Play Services. They are great and are suitable replacements for Apple and Google. - Osmand(FOSS) for maps (supports being fully offline!) - Signal and Discord for messaging (Discord is sandboxed) - Newpipe(FOSS) for Youtube - F-droid(FOSS) for my FOSS appstore - APKmirror for the few non-free apps I need - Libretorrent(FOSS) and VLC(FOSS) for watching movies - Firefox(FOS…

I prefer FairEmail (FOSS) over K9 Mail because it's more modern.

I also recommend CutTheCord as a Discord client. It's not FOSS because it's based on the official client but it's privacy oriented.

https://gitdab.com/distok/cutthecord

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#277

Earlier quoted context omitted.

Does nobody in the EU do computers ? How do they pass asinine laws like this ? I mean, from the outside, it always appears as though the EU is much better than the US when it comes to consumer rights, but it always feels like they don't have a very good grip on technology.

It's hard to explain but Poland got hooked on mobile payments/banking, the adoption is very high and one of the major players is home grown.

Btw, I live in Poland, and I use my banking app for internet payments and NFC payments using Pixel with CalyxOS.

So it's possible to do that with some of the banking apps.

Re: Android phones are sending significant amount of user data with no opt-out [pdf]

#278
post #152

Earlier quoted context omitted.

Some will, however I have heard some of these apps have janky hooks into Android's trust system which will break them on non-google distros. Personally I wouldn't suggest having banking apps on a phone. You can always use the web browser if you absolutely must access those accounts.

Most banks in EU require phone app based confirmations for transfers and other operations (according to PDS2 directive). Visa and Mastercard also introduced 3DSecrue system which piggybacks on the same system of confirmations. Vendors are incentivised to adopt it by lower rates. In essence when paying with card or making a wire transfer (or using some instant transfer method, for example Blik in Poland), you get noti…

Didn't know this was driven by PDS2. As much as I appreciate the convenience, I still find the whole drive fucking annoying - especially that, with all the talk about data portability, I still can't get a simple API endpoint I could point a script at to fetch me my account's balance.

Yes, I'm bitter. If there's ever a bank that puts end-user automation first, I'll switch in a second.

Post reply on HN